ASUS RT Wireless Routers Easy to Hack, Easy to Patch

Status
Not open for further replies.

bit_user

Distinguished
Herald
Jan 20, 2010
68
0
18,590
2
ASUS should sign their firmware images. That way, they couldn't be spoofed.

In order to preserve the ability to use opensource firmware on them, any firmware lacking a signature could present users with a warning and an option to install it anyway. Or maybe they could place an option on one of the admin pages to disable the check.
 

goinginstyle

Distinguished
May 14, 2008
1
0
18,510
0
This was fixed back in July, old news. And the process to target a particular router on earlier firmware plus enable the hack described is fifty times more difficult than a standard phishing attack using this site's credentials. ;)
 

wekilledkenny

Honorable
Jan 22, 2013
7
0
10,510
0
What idiot wrote this article?
"first find a friend with a different brand of router"
How about taking the ethernet cable out of the WAN port of the router and plugging it directly into a computer? Seems approximately 1e6 times better and simpler than "find a friend to update your router".
 

bit_user

Distinguished
Herald
Jan 20, 2010
68
0
18,590
2
What idiot wrote this article?
"first find a friend with a different brand of router"
How about taking the ethernet cable out of the WAN port of the router and plugging it directly into a computer? Seems approximately 1e6 times better and simpler than "find a friend to update your router".
Now you're giving up the security of the router and putting your box directly on the internet? Nice. Plus, my broadband provider used to make me call them when I replaced my router. The cable modem will only talk to that MAC address (though I could obviously spoof it). Maybe some still do this.
 
Status
Not open for further replies.
Thread starter Similar threads Forum Replies Date
Paul Wagenseil Antivirus / Security / Privacy 3
D Antivirus / Security / Privacy 3
J Antivirus / Security / Privacy 1
G Antivirus / Security / Privacy 2
S Antivirus / Security / Privacy 1
A Antivirus / Security / Privacy 13
G Antivirus / Security / Privacy 0
Marshall Honorof Antivirus / Security / Privacy 1
N Antivirus / Security / Privacy 2
E Antivirus / Security / Privacy 3
K Antivirus / Security / Privacy 6
X Antivirus / Security / Privacy 1
G Antivirus / Security / Privacy 0
S Antivirus / Security / Privacy 1
KiL3MaNjAr0W Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 9
R Antivirus / Security / Privacy 1
Jonathan Cave Antivirus / Security / Privacy 2
L Antivirus / Security / Privacy 1
C Antivirus / Security / Privacy 1

ASK THE COMMUNITY